autofmt | Triage

Sharing

Copy URL Twitter E-mail

General

Target

autofmt
Size

278KB
MD5

78a9472f84e3750c798c94c77ff6dfdb
SHA1

d1637df7eb398948e37e1232c5130701477c1fe4
SHA256

218e38e35ccc0b99c7844dd8a019483df541f24a3ad795733f6cd606b2a5739a
SHA512

17f96b4d7e6bc46400c0a77722e26cf7fb1193e8df38f5863f124fcdc9a39ac3b7fbed0a00f6fd240669af1bccd2afedbbb6c0cb4e2799ade25c0364ffeac2ce
SSDEEP

6144:kQiI75IsdMZ9kEt9qjcaWH82icGz6W2Rdbg2dtzZeGOjnwWVTW+ft:6wldwpMvQ8jGW2DjulnFVTJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
autofmt

Files

autofmt
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\5wjb0qi\obj\Release\QQf.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 275KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ